Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

dyen

dyen dyen loads a Mach-O dylib in memory using stock macOS Python and calls an exported entry point without dlopen on that dylib. The aim is that the image is never a standalone file on the target and is never registered with dyld. by cenobyte [email protected] 2026...

EUVD-2026-101749

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866

Versions of Renovate prior to 44.61.3 are vulnerable to a protection mechanism bypass (CWE-693). The flaw allows an attacker to skip minimumReleaseAge checks when a user requests a PR rebase using the rebase/retry checkbox. This enables an attacker who publishes a malicious dependency to have tha...

CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

PT-2026-114180

Name of the Vulnerable Software and Affected Versions Renovate versions prior to 44.61.3 Description A protection mechanism bypass exists that allows minimumReleaseAge checks to be skipped when a user requests a Pull Request PR rebase using the rebase/retry checkbox. This allows an attacker to...

CVE-2026-110866: Protection Mechanism Failure

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-52806

Gogs RCE — Argument Injection in git rebase CWE-88 Authenticated remote code execution against Gogs is parsed by Git as the --exec flag rather than a positional argument, causing sh -c to run after each replayed commit during the rebase. How the exploit works 1. Pre-flight — determines if the...

Command Injection

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Command Injection via the rebase command handler and the trailer..cmd/trailer..command configuration keys, which allow an attacker to inject the...

Oracle Linux 9 : openssl (ELSA-2026-500327)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500327 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

openssl security update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

rsync security, bug fix, and enhancement update

3.2.7-1 - Resolves: RHEL-248836 - Rebase rsync to version 3.2.7 in RHEL9...

Oracle Linux 9 : ELSA-2026-64824-0: / redis (ELSA-2026-648240)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648240 advisory. - rebase to 6.2.24 for CVE-2026-66373 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...

Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

Fedora 45 : expat (2026-fefd0cbb42)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fefd0cbb42 advisory. Rebase to 2.8.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : openssl (2026-3d5ab046c4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3d5ab046c4 advisory. Rebase to OpenSSL 4.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 45 : memcached (2026-fb82981047)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb82981047 advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...